##// END OF EJS Templates
No need to check if the service exists...
No need to check if the service exists If this snippet is included, the service exists

Fichier de la dernière révision:

r527:71446b4553f8
r579:90a66357153e
Show More
13-kernel.sh
602 lines | 23.7 KiB | application/x-sh | BashLexer
Filip Pytloun
Refactor: split bootstrap actions and allow custom
r56 #
drtyhlpr
Added Raspberry Pi 3 model support
r94 # Build and Setup RPi2/3 Kernel
Filip Pytloun
Refactor: split bootstrap actions and allow custom
r56 #
Jan Wagner
spliting more files, fix-uboot, fix-fbturbo, fix-locale
r67 # Load utility functions
Filip Pytloun
Refactor: split bootstrap actions and allow custom
r56 . ./functions.sh
Unknown
kernel features + nexmon monitor mode wlan patch(kali-kernel) with RPI3,RPI3B+ firmware patch...
r502 # Need to use kali kernel src if nexmon is enabled
if [ "$ENABLE_NEXMON" = true ] ; then
KERNEL_URL="${KALI_KERNEL_URL}"
Unknown
- added new kernel features asked in interactive setup while compiling...
r522 # Clear Branch and KernelSRC_DIR if using nexmon. Everyone will forget to clone kali kernel instead of nomrla kernel
Unknown
kernel features + nexmon monitor mode wlan patch(kali-kernel) with RPI3,RPI3B+ firmware patch...
r502 KERNEL_BRANCH=""
Unknown
- added new kernel features asked in interactive setup while compiling...
r522 KERNELSRC_DIR=""
Unknown
kernel features + nexmon monitor mode wlan patch(kali-kernel) with RPI3,RPI3B+ firmware patch...
r502 fi
Filip Pytloun
Refactor: split bootstrap actions and allow custom
r56 # Fetch and build latest raspberry kernel
if [ "$BUILD_KERNEL" = true ] ; then
Jan Wagner
Added: KERNEL_SRCDIR, path-checks, code-cleanup
r72 # Setup source directory
Unknown
use variables more often
r355 mkdir -p "${KERNEL_DIR}"
Filip Pytloun
Refactor: split bootstrap actions and allow custom
r56
Jan Wagner
Added: KERNEL_SRCDIR, path-checks, code-cleanup
r72 # Copy existing kernel sources into chroot directory
Jan Wagner
Added: KERNELSRC_PREBUILT, KERNELSRC_ rename, fix-quotes
r75 if [ -n "$KERNELSRC_DIR" ] && [ -d "$KERNELSRC_DIR" ] ; then
drtyhlpr
Fix: copy of kernel .config...
r227 # Copy kernel sources and include hidden files
Unknown
use variables more often
r355 cp -r "${KERNELSRC_DIR}/". "${KERNEL_DIR}"
Jan Wagner
Added: KERNEL_SRCDIR, path-checks, code-cleanup
r72
# Clean the kernel sources
Jan Wagner
Added: KERNELSRC_PREBUILT, KERNELSRC_ rename, fix-quotes
r75 if [ "$KERNELSRC_CLEAN" = true ] && [ "$KERNELSRC_PREBUILT" = false ] ; then
drtyhlpr
Added Raspberry Pi 3 model support
r94 make -C "${KERNEL_DIR}" ARCH="${KERNEL_ARCH}" CROSS_COMPILE="${CROSS_COMPILE}" mrproper
Jan Wagner
Added: KERNEL_SRCDIR, path-checks, code-cleanup
r72 fi
Jan Wagner
Added: KERNELSRC_PREBUILT, KERNELSRC_ rename, fix-quotes
r75 else # KERNELSRC_DIR=""
drtyhlpr
Updated: Dropping privileges, chroot compiler install, dropbear sshd config
r142 # Create temporary directory for kernel sources
Petter Reinholdtsen
Introduce as_nobody() function to make it easier to control how it is done....
r174 temp_dir=$(as_nobody mktemp -d)
drtyhlpr
Updated: Dropping privileges, chroot compiler install, dropbear sshd config
r142
# Fetch current RPi2/3 kernel sources
Bobberty
Added variables to allow differnt branches and arm64.
r147 if [ -z "${KERNEL_BRANCH}" ] ; then
drtyhlpr
fix: kernel compilation, add ccache support
r248 as_nobody -H git -C "${temp_dir}" clone --depth=1 "${KERNEL_URL}" linux
Bobberty
Added variables to allow differnt branches and arm64.
r147 else
drtyhlpr
fix: kernel compilation, add ccache support
r248 as_nobody -H git -C "${temp_dir}" clone --depth=1 --branch "${KERNEL_BRANCH}" "${KERNEL_URL}" linux
Unknown
fixes...
r338 fi
drtyhlpr
Updated: Dropping privileges, chroot compiler install, dropbear sshd config
r142 # Copy downloaded kernel sources
Unknown
use variables more often
r355 cp -r "${temp_dir}/linux/"* "${KERNEL_DIR}"
drtyhlpr
Updated: Dropping privileges, chroot compiler install, dropbear sshd config
r142
# Remove temporary directory for kernel sources
rm -fr "${temp_dir}"
# Set permissions of the kernel sources
chown -R root:root "${R}/usr/src"
Jan Wagner
Added: KERNEL_SRCDIR, path-checks, code-cleanup
r72 fi
Jan Wagner
spliting more files, fix-uboot, fix-fbturbo, fix-locale
r67
# Calculate optimal number of kernel building threads
Jan Wagner
Added: KERNELSRC_PREBUILT, KERNELSRC_ rename, fix-quotes
r75 if [ "$KERNEL_THREADS" = "1" ] && [ -r /proc/cpuinfo ] ; then
KERNEL_THREADS=$(grep -c processor /proc/cpuinfo)
Jan Wagner
spliting more files, fix-uboot, fix-fbturbo, fix-locale
r67 fi
Filip Pytloun
Refactor: split bootstrap actions and allow custom
r56
Jan Wagner
Added: KERNEL_REDUCE - less than 128MB used space, Added: REDUCE_ parameters
r76 # Configure and build kernel
Jan Wagner
Added: KERNELSRC_PREBUILT, KERNELSRC_ rename, fix-quotes
r75 if [ "$KERNELSRC_PREBUILT" = false ] ; then
Jan Wagner
Added: KERNEL_REDUCE - less than 128MB used space, Added: REDUCE_ parameters
r76 # Remove device, network and filesystem drivers from kernel configuration
if [ "$KERNEL_REDUCE" = true ] ; then
drtyhlpr
Added Raspberry Pi 3 model support
r94 make -C "${KERNEL_DIR}" ARCH="${KERNEL_ARCH}" CROSS_COMPILE="${CROSS_COMPILE}" "${KERNEL_DEFCONFIG}"
Jan Wagner
Added: KERNEL_REDUCE - less than 128MB used space, Added: REDUCE_ parameters
r76 sed -i\
-e "s/\(^CONFIG_SND.*\=\).*/\1n/"\
-e "s/\(^CONFIG_SOUND.*\=\).*/\1n/"\
-e "s/\(^CONFIG_AC97.*\=\).*/\1n/"\
-e "s/\(^CONFIG_VIDEO_.*\=\).*/\1n/"\
-e "s/\(^CONFIG_MEDIA_TUNER.*\=\).*/\1n/"\
-e "s/\(^CONFIG_DVB.*\=\)[ym]/\1n/"\
-e "s/\(^CONFIG_REISERFS.*\=\).*/\1n/"\
-e "s/\(^CONFIG_JFS.*\=\).*/\1n/"\
-e "s/\(^CONFIG_XFS.*\=\).*/\1n/"\
-e "s/\(^CONFIG_GFS2.*\=\).*/\1n/"\
-e "s/\(^CONFIG_OCFS2.*\=\).*/\1n/"\
-e "s/\(^CONFIG_BTRFS.*\=\).*/\1n/"\
-e "s/\(^CONFIG_HFS.*\=\).*/\1n/"\
-e "s/\(^CONFIG_JFFS2.*\=\)[ym]/\1n/"\
-e "s/\(^CONFIG_UBIFS.*\=\).*/\1n/"\
-e "s/\(^CONFIG_SQUASHFS.*\=\)[ym]/\1n/"\
-e "s/\(^CONFIG_W1.*\=\)[ym]/\1n/"\
-e "s/\(^CONFIG_HAMRADIO.*\=\).*/\1n/"\
-e "s/\(^CONFIG_CAN.*\=\).*/\1n/"\
-e "s/\(^CONFIG_IRDA.*\=\).*/\1n/"\
-e "s/\(^CONFIG_BT_.*\=\).*/\1n/"\
-e "s/\(^CONFIG_WIMAX.*\=\)[ym]/\1n/"\
-e "s/\(^CONFIG_6LOWPAN.*\=\).*/\1n/"\
-e "s/\(^CONFIG_IEEE802154.*\=\).*/\1n/"\
-e "s/\(^CONFIG_NFC.*\=\).*/\1n/"\
-e "s/\(^CONFIG_FB_TFT=.*\=\).*/\1n/"\
-e "s/\(^CONFIG_TOUCHSCREEN.*\=\).*/\1n/"\
-e "s/\(^CONFIG_USB_GSPCA_.*\=\).*/\1n/"\
-e "s/\(^CONFIG_DRM.*\=\).*/\1n/"\
drtyhlpr
Added Raspberry Pi 3 model support
r94 "${KERNEL_DIR}/.config"
Jan Wagner
Added: KERNEL_REDUCE - less than 128MB used space, Added: REDUCE_ parameters
r76 fi
Jan Wagner
Added: KERNELSRC_PREBUILT, KERNELSRC_ rename, fix-quotes
r75 if [ "$KERNELSRC_CONFIG" = true ] ; then
# Load default raspberry kernel configuration
drtyhlpr
Added Raspberry Pi 3 model support
r94 make -C "${KERNEL_DIR}" ARCH="${KERNEL_ARCH}" CROSS_COMPILE="${CROSS_COMPILE}" "${KERNEL_DEFCONFIG}"
Unknown
- added new kernel features asked in interactive setup while compiling...
r522
Unknown
kernel features + nexmon monitor mode wlan patch(kali-kernel) with RPI3,RPI3B+ firmware patch...
r502 #Switch to KERNELSRC_DIR so we can use set_kernel_config
cd "${KERNEL_DIR}" || exit
# enable ZSWAP see https://askubuntu.com/a/472227 or https://wiki.archlinux.org/index.php/zswap
if [ "$KERNEL_ZSWAP" = true ] ; then
set_kernel_config CONFIG_ZPOOL y
set_kernel_config CONFIG_ZSWAP y
set_kernel_config CONFIG_ZBUD y
set_kernel_config CONFIG_Z3FOLD y
set_kernel_config CONFIG_ZSMALLOC y
set_kernel_config CONFIG_PGTABLE_MAPPING y
Unknown
0
r527 set_kernel_config CONFIG_LZO_COMPRESS y
Unknown
kernel features + nexmon monitor mode wlan patch(kali-kernel) with RPI3,RPI3B+ firmware patch...
r502 fi
Unknown
- added new kernel features asked in interactive setup while compiling...
r522
Unknown
kernel features + nexmon monitor mode wlan patch(kali-kernel) with RPI3,RPI3B+ firmware patch...
r502 # enable basic KVM support; see https://www.raspberrypi.org/forums/viewtopic.php?f=63&t=210546&start=25#p1300453
if [ "$KERNEL_VIRT" = true ] && { [ "$RPI_MODEL" = 2 ] || [ "$RPI_MODEL" = 3 ] || [ "$RPI_MODEL" = 3P ] ; } ; then
Unknown
0
r527 set_kernel_config CONFIG_HAVE_KVM_IRQCHIP y
set_kernel_config CONFIG_HAVE_KVM_ARCH_TLB_FLUSH_ALL y
set_kernel_config CONFIG_HAVE_KVM_CPU_RELAX_INTERCEPT y
set_kernel_config CONFIG_HAVE_KVM_EVENTFD y
set_kernel_config CONFIG_HAVE_KVM_IRQFD y
set_kernel_config CONFIG_HAVE_KVM_IRQ_ROUTING y
set_kernel_config CONFIG_HAVE_KVM_MSI y
Unknown
kernel features + nexmon monitor mode wlan patch(kali-kernel) with RPI3,RPI3B+ firmware patch...
r502 set_kernel_config CONFIG_KVM y
Unknown
0
r527 set_kernel_config CONFIG_KVM_ARM_HOST y
set_kernel_config CONFIG_KVM_ARM_PMU y
set_kernel_config CONFIG_KVM_COMPAT y
set_kernel_config CONFIG_KVM_GENERIC_DIRTYLOG_READ_PROTECT y
set_kernel_config CONFIG_KVM_MMIO y
set_kernel_config CONFIG_KVM_VFIO y
set_kernel_config CONFIG_VHOST m
Unknown
kernel features + nexmon monitor mode wlan patch(kali-kernel) with RPI3,RPI3B+ firmware patch...
r502 set_kernel_config CONFIG_VHOST_CROSS_ENDIAN_LEGACY y
Unknown
0
r527 set_kernel_config CONFIG_VHOST_NET m
set_kernel_config CONFIG_VIRTUALIZATION y
set_kernel_config CONFIG_MMU_NOTIFIER y
# erratum
set_kernel_config ARM64_ERRATUM_834220 y
# https://sourceforge.net/p/kvm/mailman/message/18440797/
set_kernel_config CONFIG_PREEMPT_NOTIFIERS y
Unknown
kernel features + nexmon monitor mode wlan patch(kali-kernel) with RPI3,RPI3B+ firmware patch...
r502 fi
Unknown
- added new kernel features asked in interactive setup while compiling...
r522
Unknown
kernel features + nexmon monitor mode wlan patch(kali-kernel) with RPI3,RPI3B+ firmware patch...
r502 # enable apparmor,integrity audit,
if [ "$KERNEL_SECURITY" = true ] ; then
# security filesystem, security models and audit
Unknown
- added new kernel features asked in interactive setup while compiling...
r522 set_kernel_config CONFIG_SECURITYFS y
set_kernel_config CONFIG_SECURITY y
Unknown
kernel features + nexmon monitor mode wlan patch(kali-kernel) with RPI3,RPI3B+ firmware patch...
r502 set_kernel_config CONFIG_AUDIT y
Unknown
- added new kernel features asked in interactive setup while compiling...
r522 # harden strcpy and memcpy
Unknown
kernel features + nexmon monitor mode wlan patch(kali-kernel) with RPI3,RPI3B+ firmware patch...
r502 set_kernel_config CONFIG_HARDENED_USERCOPY=y
set_kernel_config CONFIG_HAVE_HARDENED_USERCOPY_ALLOCATOR=y
Unknown
- added new kernel features asked in interactive setup while compiling...
r522 set_kernel_config CONFIG_FORTIFY_SOURCE=y
# integrity sub-system
Unknown
kernel features + nexmon monitor mode wlan patch(kali-kernel) with RPI3,RPI3B+ firmware patch...
r502 set_kernel_config CONFIG_INTEGRITY=y
set_kernel_config CONFIG_INTEGRITY_ASYMMETRIC_KEYS=y
set_kernel_config CONFIG_INTEGRITY_AUDIT=y
set_kernel_config CONFIG_INTEGRITY_SIGNATURE=y
set_kernel_config CONFIG_INTEGRITY_TRUSTED_KEYRING=y
Unknown
- added new kernel features asked in interactive setup while compiling...
r522
# This option provides support for retaining authentication tokens and access keys in the kernel.
Unknown
kernel features + nexmon monitor mode wlan patch(kali-kernel) with RPI3,RPI3B+ firmware patch...
r502 set_kernel_config CONFIG_KEYS=y
set_kernel_config CONFIG_KEYS_COMPAT=y
Unknown
- added new kernel features asked in interactive setup while compiling...
r522
# Apparmor
Unknown
kernel features + nexmon monitor mode wlan patch(kali-kernel) with RPI3,RPI3B+ firmware patch...
r502 set_kernel_config CONFIG_SECURITY_APPARMOR_BOOTPARAM_VALUE 0
set_kernel_config CONFIG_SECURITY_APPARMOR_HASH_DEFAULT y
Unknown
- added new kernel features asked in interactive setup while compiling...
r522 set_kernel_config CONFIG_DEFAULT_SECURITY_APPARMOR y
set_kernel_config CONFIG_SECURITY_APPARMOR y
set_kernel_config CONFIG_SECURITY_APPARMOR_HASH y
set_kernel_config CONFIG_DEFAULT_SECURITY "apparmor"
# restrictions on unprivileged users reading the kernel
Unknown
kernel features + nexmon monitor mode wlan patch(kali-kernel) with RPI3,RPI3B+ firmware patch...
r502 set_kernel_config CONFIG_SECURITY_DMESG_RESTRICT=y
Unknown
- added new kernel features asked in interactive setup while compiling...
r522
# network security hooks
Unknown
kernel features + nexmon monitor mode wlan patch(kali-kernel) with RPI3,RPI3B+ firmware patch...
r502 set_kernel_config CONFIG_SECURITY_NETWORK y
set_kernel_config CONFIG_SECURITY_NETWORK_XFRM=y
set_kernel_config CONFIG_SECURITY_PATH=y
set_kernel_config CONFIG_SECURITY_YAMA=y
Unknown
- added new kernel features asked in interactive setup while compiling...
r522
# New Options
if [ "$KERNEL_NF" = true ] ; then
set_kernel_config CONFIG_IP_NF_SECURITY m
set_kernel_config CONFIG_NETLABEL y
set_kernel_config CONFIG_IP6_NF_SECURITY m
fi
set_kernel_config CONFIG_SECURITY_SELINUX n
set_kernel_config CONFIG_SECURITY_SMACK n
set_kernel_config CONFIG_SECURITY_TOMOYO n
set_kernel_config CONFIG_SECURITY_APPARMOR_DEBUG n
set_kernel_config CONFIG_SECURITY_LOADPIN n
set_kernel_config CONFIG_HARDENED_USERCOPY_PAGESPAN n
set_kernel_config CONFIG_IMA n
set_kernel_config CONFIG_EVM n
set_kernel_config CONFIG_FANOTIFY_ACCESS_PERMISSIONS y
set_kernel_config CONFIG_NFSD_V4_SECURITY_LABEL y
set_kernel_config CONFIG_PKCS7_MESSAGE_PARSER y
set_kernel_config CONFIG_SYSTEM_TRUSTED_KEYRING y
set_kernel_config CONFIG_SYSTEM_TRUSTED_KEYS y
set_kernel_config CONFIG_SYSTEM_EXTRA_CERTIFICATE y
set_kernel_config CONFIG_SECONDARY_TRUSTED_KEYRING y
set_kernel_config CONFIG_IMA_KEYRINGS_PERMIT_SIGNED_BY_BUILTIN_OR_SECONDARY n
set_kernel_config CONFIG_SYSTEM_TRUSTED_KEYS m
set_kernel_config CONFIG_SYSTEM_EXTRA_CERTIFICATE_SIZE 4096
set_kernel_config CONFIG_ARM64_CRYPTO y
set_kernel_config CONFIG_CRYPTO_SHA256_ARM64 m
set_kernel_config CONFIG_CRYPTO_SHA512_ARM64 m
set_kernel_config CONFIG_CRYPTO_SHA1_ARM64_CE m
set_kernel_config CRYPTO_GHASH_ARM64_CE m
set_kernel_config CRYPTO_SHA2_ARM64_CE m
set_kernel_config CONFIG_CRYPTO_CRCT10DIF_ARM64_CE m
set_kernel_config CONFIG_CRYPTO_CRC32_ARM64_CE m
set_kernel_config CONFIG_CRYPTO_AES_ARM64 m
set_kernel_config CONFIG_CRYPTO_AES_ARM64_CE m
set_kernel_config CONFIG_CRYPTO_AES_ARM64_CE_CCM y
set_kernel_config CONFIG_CRYPTO_AES_ARM64_CE_BLK y
set_kernel_config CONFIG_CRYPTO_AES_ARM64_NEON_BLK m
set_kernel_config CONFIG_CRYPTO_CHACHA20_NEON m
set_kernel_config CONFIG_CRYPTO_AES_ARM64_BS m
set_kernel_config SYSTEM_TRUSTED_KEYS
fi
Unknown
kernel features + nexmon monitor mode wlan patch(kali-kernel) with RPI3,RPI3B+ firmware patch...
r502 # Netfilter kernel support See https://github.com/raspberrypi/linux/issues/2177#issuecomment-354647406
Unknown
- added new kernel features asked in interactive setup while compiling...
r522 if [ "$KERNEL_NF" = true ] ; then
set_kernel_config CONFIG_IP_NF_TARGET_SYNPROXY m
set_kernel_config CONFIG_NETFILTER_XT_TARGET_AUDIT m
set_kernel_config CONFIG_NETFILTER_XT_MATCH_CGROUP m
set_kernel_config CONFIG_NETFILTER_XT_MATCH_IPCOMP m
set_kernel_config CONFIG_NETFILTER_XT_MATCH_SOCKET m
set_kernel_config CONFIG_NFT_FIB_INET m
set_kernel_config CONFIG_NFT_FIB_IPV4 m
set_kernel_config CONFIG_NFT_FIB_IPV6 m
set_kernel_config CONFIG_NFT_FIB_NETDEV m
set_kernel_config CONFIG_NFT_OBJREF m
set_kernel_config CONFIG_NFT_RT m
set_kernel_config CONFIG_NFT_SET_BITMAP m
set_kernel_config CONFIG_NF_CONNTRACK_TIMEOUT y
set_kernel_config CONFIG_NF_LOG_ARP m
set_kernel_config CONFIG_NF_SOCKET_IPV4 m
set_kernel_config CONFIG_NF_SOCKET_IPV6 m
Unknown
kernel features + nexmon monitor mode wlan patch(kali-kernel) with RPI3,RPI3B+ firmware patch...
r502 set_kernel_config CONFIG_BRIDGE_EBT_BROUTE m
set_kernel_config CONFIG_BRIDGE_EBT_T_FILTER m
set_kernel_config CONFIG_BRIDGE_NF_EBTABLES m
set_kernel_config CONFIG_IP6_NF_IPTABLES m
set_kernel_config CONFIG_IP6_NF_MATCH_AH m
set_kernel_config CONFIG_IP6_NF_MATCH_EUI64 m
set_kernel_config CONFIG_IP6_NF_NAT m
set_kernel_config CONFIG_IP6_NF_TARGET_MASQUERADE m
set_kernel_config CONFIG_IP6_NF_TARGET_NPT m
Unknown
- added new kernel features asked in interactive setup while compiling...
r522 set_kernel_config CONFIG_IP_NF_SECURITY m
Unknown
kernel features + nexmon monitor mode wlan patch(kali-kernel) with RPI3,RPI3B+ firmware patch...
r502 set_kernel_config CONFIG_IP_SET_BITMAP_IPMAC m
set_kernel_config CONFIG_IP_SET_BITMAP_PORT m
set_kernel_config CONFIG_IP_SET_HASH_IP m
set_kernel_config CONFIG_IP_SET_HASH_IPMARK m
set_kernel_config CONFIG_IP_SET_HASH_IPPORT m
set_kernel_config CONFIG_IP_SET_HASH_IPPORTIP m
set_kernel_config CONFIG_IP_SET_HASH_IPPORTNET m
set_kernel_config CONFIG_IP_SET_HASH_MAC m
set_kernel_config CONFIG_IP_SET_HASH_NET m
set_kernel_config CONFIG_IP_SET_HASH_NETIFACE m
set_kernel_config CONFIG_IP_SET_HASH_NETNET m
set_kernel_config CONFIG_IP_SET_HASH_NETPORT m
set_kernel_config CONFIG_IP_SET_HASH_NETPORTNET m
set_kernel_config CONFIG_IP_SET_LIST_SET m
set_kernel_config CONFIG_NETFILTER_XTABLES m
set_kernel_config CONFIG_NETFILTER_XTABLES m
set_kernel_config CONFIG_NFT_BRIDGE_META m
set_kernel_config CONFIG_NFT_BRIDGE_REJECT m
set_kernel_config CONFIG_NFT_CHAIN_NAT_IPV4 m
set_kernel_config CONFIG_NFT_CHAIN_NAT_IPV6 m
set_kernel_config CONFIG_NFT_CHAIN_ROUTE_IPV4 m
set_kernel_config CONFIG_NFT_CHAIN_ROUTE_IPV6 m
set_kernel_config CONFIG_NFT_COMPAT m
set_kernel_config CONFIG_NFT_COUNTER m
set_kernel_config CONFIG_NFT_CT m
set_kernel_config CONFIG_NFT_DUP_IPV4 m
set_kernel_config CONFIG_NFT_DUP_IPV6 m
set_kernel_config CONFIG_NFT_DUP_NETDEV m
set_kernel_config CONFIG_NFT_EXTHDR m
set_kernel_config CONFIG_NFT_FWD_NETDEV m
set_kernel_config CONFIG_NFT_HASH m
set_kernel_config CONFIG_NFT_LIMIT m
set_kernel_config CONFIG_NFT_LOG m
set_kernel_config CONFIG_NFT_MASQ m
set_kernel_config CONFIG_NFT_MASQ_IPV4 m
set_kernel_config CONFIG_NFT_MASQ_IPV6 m
set_kernel_config CONFIG_NFT_META m
set_kernel_config CONFIG_NFT_NAT m
set_kernel_config CONFIG_NFT_NUMGEN m
set_kernel_config CONFIG_NFT_QUEUE m
set_kernel_config CONFIG_NFT_QUOTA m
set_kernel_config CONFIG_NFT_REDIR m
set_kernel_config CONFIG_NFT_REDIR_IPV4 m
set_kernel_config CONFIG_NFT_REDIR_IPV6 m
set_kernel_config CONFIG_NFT_REJECT m
set_kernel_config CONFIG_NFT_REJECT_INET m
set_kernel_config CONFIG_NFT_REJECT_IPV4 m
set_kernel_config CONFIG_NFT_REJECT_IPV6 m
set_kernel_config CONFIG_NFT_SET_HASH m
set_kernel_config CONFIG_NFT_SET_RBTREE m
set_kernel_config CONFIG_NF_CONNTRACK_IPV4 m
set_kernel_config CONFIG_NF_CONNTRACK_IPV6 m
set_kernel_config CONFIG_NF_DEFRAG_IPV4 m
set_kernel_config CONFIG_NF_DEFRAG_IPV6 m
set_kernel_config CONFIG_NF_DUP_IPV4 m
set_kernel_config CONFIG_NF_DUP_IPV6 m
set_kernel_config CONFIG_NF_DUP_NETDEV m
set_kernel_config CONFIG_NF_LOG_BRIDGE m
set_kernel_config CONFIG_NF_LOG_IPV4 m
set_kernel_config CONFIG_NF_LOG_IPV6 m
set_kernel_config CONFIG_NF_NAT_IPV4 m
set_kernel_config CONFIG_NF_NAT_IPV6 m
set_kernel_config CONFIG_NF_NAT_MASQUERADE_IPV4 m
set_kernel_config CONFIG_NF_NAT_MASQUERADE_IPV6 m
set_kernel_config CONFIG_NF_NAT_PPTP m
set_kernel_config CONFIG_NF_NAT_PROTO_GRE m
set_kernel_config CONFIG_NF_NAT_REDIRECT m
set_kernel_config CONFIG_NF_NAT_SIP m
set_kernel_config CONFIG_NF_NAT_SNMP_BASIC m
set_kernel_config CONFIG_NF_NAT_TFTP m
set_kernel_config CONFIG_NF_REJECT_IPV4 m
set_kernel_config CONFIG_NF_REJECT_IPV6 m
set_kernel_config CONFIG_NF_TABLES m
set_kernel_config CONFIG_NF_TABLES_ARP m
set_kernel_config CONFIG_NF_TABLES_BRIDGE m
set_kernel_config CONFIG_NF_TABLES_INET m
set_kernel_config CONFIG_NF_TABLES_IPV4 m
set_kernel_config CONFIG_NF_TABLES_IPV6 m
set_kernel_config CONFIG_NF_TABLES_NETDEV m
fi
# Enables BPF syscall for systemd-journald see https://github.com/torvalds/linux/blob/master/init/Kconfig#L848 or https://groups.google.com/forum/#!topic/linux.gentoo.user/_2aSc_ztGpA
if [ "$KERNEL_BPF" = true ] ; then
set_kernel_config CONFIG_BPF_SYSCALL y
set_kernel_config CONFIG_BPF_EVENTS y
set_kernel_config CONFIG_BPF_STREAM_PARSER y
set_kernel_config CONFIG_CGROUP_BPF y
fi
Unknown
- added new kernel features asked in interactive setup while compiling...
r522
Unknown
kernel features + nexmon monitor mode wlan patch(kali-kernel) with RPI3,RPI3B+ firmware patch...
r502 # KERNEL_DEFAULT_GOV was set by user
Unknown
- added new kernel features asked in interactive setup while compiling...
r522 if [ "$KERNEL_DEFAULT_GOV" != powersave ] && [ -n "$KERNEL_DEFAULT_GOV" ] ; then
Unknown
kernel features + nexmon monitor mode wlan patch(kali-kernel) with RPI3,RPI3B+ firmware patch...
r502 case "$KERNEL_DEFAULT_GOV" in
performance)
set_kernel_config CONFIG_CPU_FREQ_DEFAULT_GOV_PERFORMANCE y
;;
userspace)
set_kernel_config CONFIG_CPU_FREQ_DEFAULT_GOV_USERSPACE y
;;
ondemand)
set_kernel_config CONFIG_CPU_FREQ_DEFAULT_GOV_ONDEMAND y
;;
conservative)
set_kernel_config CONFIG_CPU_FREQ_DEFAULT_GOV_CONSERVATIVE y
;;
shedutil)
set_kernel_config CONFIG_CPU_FREQ_DEFAULT_GOV_SCHEDUTIL y
;;
*)
echo "error: unsupported default cpu governor"
exit 1
;;
esac
Unknown
- added new kernel features asked in interactive setup while compiling...
r522
# unset previous default governor
Unknown
kernel features + nexmon monitor mode wlan patch(kali-kernel) with RPI3,RPI3B+ firmware patch...
r502 unset_kernel_config CONFIG_CPU_FREQ_DEFAULT_GOV_POWERSAVE
fi
#Revert to previous directory
cd "${WORKDIR}" || exit
Jan Wagner
Added: KERNEL_SRCDIR, path-checks, code-cleanup
r72
drtyhlpr
Added: Initial QEMU emulation support
r259 # Set kernel configuration parameters to enable qemu emulation
if [ "$ENABLE_QEMU" = true ] ; then
Unknown
https://www.shellcheck.net/...
r336 echo "CONFIG_FHANDLE=y" >> "${KERNEL_DIR}"/.config
echo "CONFIG_LBDAF=y" >> "${KERNEL_DIR}"/.config
drtyhlpr
fix: QEMU with cryptfs
r263
if [ "$ENABLE_CRYPTFS" = true ] ; then
Unknown
https://www.shellcheck.net/...
r336 {
echo "CONFIG_EMBEDDED=y"
echo "CONFIG_EXPERT=y"
echo "CONFIG_DAX=y"
echo "CONFIG_MD=y"
echo "CONFIG_BLK_DEV_MD=y"
echo "CONFIG_MD_AUTODETECT=y"
echo "CONFIG_BLK_DEV_DM=y"
echo "CONFIG_BLK_DEV_DM_BUILTIN=y"
echo "CONFIG_DM_CRYPT=y"
echo "CONFIG_CRYPTO_BLKCIPHER=y"
echo "CONFIG_CRYPTO_CBC=y"
echo "CONFIG_CRYPTO_XTS=y"
echo "CONFIG_CRYPTO_SHA512=y"
Unknown
fixes...
r338 echo "CONFIG_CRYPTO_MANAGER=y"
Unknown
fixes...
r420 } >> "${KERNEL_DIR}"/.config
Unknown
fixes...
r338 fi
drtyhlpr
Added: Initial QEMU emulation support
r259 fi
drtyhlpr
fix: kernel compilation, add ccache support
r248 # Copy custom kernel configuration file
Unknown
https://www.shellcheck.net/...
r336 if [ -n "$KERNELSRC_USRCONFIG" ] ; then
cp "$KERNELSRC_USRCONFIG" "${KERNEL_DIR}"/.config
root
Restart systemd.resolv only if not resolv.conf exists
r101 fi
drtyhlpr
fix: kernel compilation, add ccache support
r248 # Set kernel configuration parameters to their default values
if [ "$KERNEL_OLDDEFCONFIG" = true ] ; then
make -C "${KERNEL_DIR}" ARCH="${KERNEL_ARCH}" CROSS_COMPILE="${CROSS_COMPILE}" olddefconfig
fi
Jan Wagner
Added: KERNELSRC_PREBUILT, KERNELSRC_ rename, fix-quotes
r75 # Start menu-driven kernel configuration (interactive)
if [ "$KERNEL_MENUCONFIG" = true ] ; then
drtyhlpr
Added Raspberry Pi 3 model support
r94 make -C "${KERNEL_DIR}" ARCH="${KERNEL_ARCH}" CROSS_COMPILE="${CROSS_COMPILE}" menuconfig
Jan Wagner
Added: KERNELSRC_PREBUILT, KERNELSRC_ rename, fix-quotes
r75 fi
Unknown
kernel features + nexmon monitor mode wlan patch(kali-kernel) with RPI3,RPI3B+ firmware patch...
r502 # end if "$KERNELSRC_CONFIG" = true
Jan Wagner
Added: KERNEL_SRCDIR, path-checks, code-cleanup
r72 fi
Jan Wagner
comment-cleanup, net-cleanup, size-calc-fix, split-more, menuconfig
r71
drtyhlpr
fix: kernel compilation, add ccache support
r248 # Use ccache to cross compile the kernel
if [ "$KERNEL_CCACHE" = true ] ; then
cc="ccache ${CROSS_COMPILE}gcc"
else
cc="${CROSS_COMPILE}gcc"
fi
# Cross compile kernel and dtbs
Unknown
https://www.shellcheck.net/...
r336 make -C "${KERNEL_DIR}" -j"${KERNEL_THREADS}" ARCH="${KERNEL_ARCH}" CROSS_COMPILE="${CROSS_COMPILE}" CC="${cc}" "${KERNEL_BIN_IMAGE}" dtbs
drtyhlpr
fix: kernel compilation, add ccache support
r248
# Cross compile kernel modules
Unknown
fixes...
r420 if grep -q "CONFIG_MODULES=y" "${KERNEL_DIR}/.config" ; then
Unknown
https://www.shellcheck.net/...
r336 make -C "${KERNEL_DIR}" -j"${KERNEL_THREADS}" ARCH="${KERNEL_ARCH}" CROSS_COMPILE="${CROSS_COMPILE}" CC="${cc}" modules
drtyhlpr
fix: kernel compilation, add ccache support
r248 fi
Unknown
kernel features + nexmon monitor mode wlan patch(kali-kernel) with RPI3,RPI3B+ firmware patch...
r502 # end if "$KERNELSRC_PREBUILT" = false
Jan Wagner
Added: KERNELSRC_PREBUILT, KERNELSRC_ rename, fix-quotes
r75 fi
Filip Pytloun
Refactor: split bootstrap actions and allow custom
r56
Jan Wagner
Added: KERNEL_SRCDIR, path-checks, code-cleanup
r72 # Check if kernel compilation was successful
Bobberty
Added variables to allow differnt branches and arm64.
r147 if [ ! -r "${KERNEL_DIR}/arch/${KERNEL_ARCH}/boot/${KERNEL_BIN_IMAGE}" ] ; then
echo "error: kernel compilation failed! (kernel image not found)"
Jan Wagner
Added: KERNEL_SRCDIR, path-checks, code-cleanup
r72 cleanup
exit 1
fi
Filip Pytloun
Refactor: split bootstrap actions and allow custom
r56 # Install kernel modules
Jan Wagner
Added: ENABLE_REDUCE - down to 160MB used space,fix-resolve,fix-machineid
r73 if [ "$ENABLE_REDUCE" = true ] ; then
Unknown
fixes...
r420 if grep -q "CONFIG_MODULES=y" "${KERNEL_DIR}/.config" ; then
drtyhlpr
fix: kernel compilation, add ccache support
r248 make -C "${KERNEL_DIR}" ARCH="${KERNEL_ARCH}" CROSS_COMPILE="${CROSS_COMPILE}" INSTALL_MOD_STRIP=1 INSTALL_MOD_PATH=../../.. modules_install
fi
Jan Wagner
Added: ENABLE_REDUCE - down to 160MB used space,fix-resolve,fix-machineid
r73 else
Unknown
fixes...
r420 if grep -q "CONFIG_MODULES=y" "${KERNEL_DIR}/.config" ; then
drtyhlpr
fix: kernel compilation, add ccache support
r248 make -C "${KERNEL_DIR}" ARCH="${KERNEL_ARCH}" CROSS_COMPILE="${CROSS_COMPILE}" INSTALL_MOD_PATH=../../.. modules_install
fi
Jan Wagner
Added: KERNELSRC_PREBUILT, KERNELSRC_ rename, fix-quotes
r75
# Install kernel firmware
Unknown
fixes...
r420 if grep -q "^firmware_install:" "${KERNEL_DIR}/Makefile" ; then
drtyhlpr
fixed: No rule to make target 'firmware_install'...
r244 make -C "${KERNEL_DIR}" ARCH="${KERNEL_ARCH}" CROSS_COMPILE="${CROSS_COMPILE}" INSTALL_FW_PATH=../../../lib firmware_install
fi
Jan Wagner
Added: ENABLE_REDUCE - down to 160MB used space,fix-resolve,fix-machineid
r73 fi
Filip Pytloun
Enhance kernel build by headers install, parallelism and cleanup
r60
# Install kernel headers
Jan Wagner
Added: KERNEL_REDUCE - less than 128MB used space, Added: REDUCE_ parameters
r76 if [ "$KERNEL_HEADERS" = true ] && [ "$KERNEL_REDUCE" = false ] ; then
drtyhlpr
Added Raspberry Pi 3 model support
r94 make -C "${KERNEL_DIR}" ARCH="${KERNEL_ARCH}" CROSS_COMPILE="${CROSS_COMPILE}" INSTALL_HDR_PATH=../.. headers_install
Filip Pytloun
Enhance kernel build by headers install, parallelism and cleanup
r60 fi
Filip Pytloun
Refactor: split bootstrap actions and allow custom
r56
Jan Wagner
Added: KERNELSRC_PREBUILT, KERNELSRC_ rename, fix-quotes
r75 # Prepare boot (firmware) directory
drtyhlpr
Added Raspberry Pi 3 model support
r94 mkdir "${BOOT_DIR}"
Jan Wagner
Added: KERNELSRC_PREBUILT, KERNELSRC_ rename, fix-quotes
r75
# Get kernel release version
Unknown
fixes...
r338 KERNEL_VERSION=$(cat "${KERNEL_DIR}/include/config/kernel.release")
Jan Wagner
Added: KERNELSRC_PREBUILT, KERNELSRC_ rename, fix-quotes
r75
# Copy kernel configuration file to the boot directory
drtyhlpr
Added Raspberry Pi 3 model support
r94 install_readonly "${KERNEL_DIR}/.config" "${R}/boot/config-${KERNEL_VERSION}"
Jan Wagner
Added: KERNELSRC_PREBUILT, KERNELSRC_ rename, fix-quotes
r75
drtyhlpr
fix: kernel compilation, add ccache support
r248 # Prepare device tree directory
drtyhlpr
Added Raspberry Pi 3 model support
r94 mkdir "${BOOT_DIR}/overlays"
Unknown
fixes...
r338
Bobberty
Added variables to allow differnt branches and arm64.
r147 # Ensure the proper .dtb is located
if [ "$KERNEL_ARCH" = "arm" ] ; then
drtyhlpr
fix: kernel compilation, add ccache support
r248 for dtb in "${KERNEL_DIR}/arch/${KERNEL_ARCH}/boot/dts/"*.dtb ; do
if [ -f "${dtb}" ] ; then
install_readonly "${dtb}" "${BOOT_DIR}/"
fi
done
Bobberty
Added variables to allow differnt branches and arm64.
r147 else
drtyhlpr
fix: kernel compilation, add ccache support
r248 for dtb in "${KERNEL_DIR}/arch/${KERNEL_ARCH}/boot/dts/broadcom/"*.dtb ; do
if [ -f "${dtb}" ] ; then
install_readonly "${dtb}" "${BOOT_DIR}/"
fi
done
Bobberty
Added variables to allow differnt branches and arm64.
r147 fi
drtyhlpr
fix: kernel compilation, add ccache support
r248 # Copy compiled dtb device tree files
if [ -d "${KERNEL_DIR}/arch/${KERNEL_ARCH}/boot/dts/overlays" ] ; then
for dtb in "${KERNEL_DIR}/arch/${KERNEL_ARCH}/boot/dts/overlays/"*.dtb ; do
if [ -f "${dtb}" ] ; then
install_readonly "${dtb}" "${BOOT_DIR}/overlays/"
fi
done
if [ -f "${KERNEL_DIR}/arch/${KERNEL_ARCH}/boot/dts/overlays/README" ] ; then
install_readonly "${KERNEL_DIR}/arch/${KERNEL_ARCH}/boot/dts/overlays/README" "${BOOT_DIR}/overlays/README"
fi
fi
Jan Wagner
fix: ENABLE_CRYPTFS -> UBOOT, SPLITFS, EXPANDROOT - cleanup
r82
if [ "$ENABLE_UBOOT" = false ] ; then
Bobberty
Added variables to allow differnt branches and arm64.
r147 # Convert and copy kernel image to the boot directory
"${KERNEL_DIR}/scripts/mkknlimg" "${KERNEL_DIR}/arch/${KERNEL_ARCH}/boot/${KERNEL_BIN_IMAGE}" "${BOOT_DIR}/${KERNEL_IMAGE}"
Jan Wagner
fix: ENABLE_CRYPTFS -> UBOOT, SPLITFS, EXPANDROOT - cleanup
r82 else
Bobberty
Added variables to allow differnt branches and arm64.
r147 # Copy kernel image to the boot directory
install_readonly "${KERNEL_DIR}/arch/${KERNEL_ARCH}/boot/${KERNEL_BIN_IMAGE}" "${BOOT_DIR}/${KERNEL_IMAGE}"
Jan Wagner
fix: ENABLE_CRYPTFS -> UBOOT, SPLITFS, EXPANDROOT - cleanup
r82 fi
Jan Wagner
spliting more files, fix-uboot, fix-fbturbo, fix-locale
r67
# Remove kernel sources
Jan Wagner
Added: KERNELSRC_PREBUILT, KERNELSRC_ rename, fix-quotes
r75 if [ "$KERNEL_REMOVESRC" = true ] ; then
drtyhlpr
Added Raspberry Pi 3 model support
r94 rm -fr "${KERNEL_DIR}"
Michal Svamberg
Prepare kernel for module compilation (ex. dkms)
r104 else
drtyhlpr
fix: kernel compilation, add ccache support
r248 # Prepare compiled kernel modules
Unknown
fixes...
r420 if grep -q "CONFIG_MODULES=y" "${KERNEL_DIR}/.config" ; then
if grep -q "^modules_prepare:" "${KERNEL_DIR}/Makefile" ; then
drtyhlpr
fix: kernel compilation, add ccache support
r248 make -C "${KERNEL_DIR}" ARCH="${KERNEL_ARCH}" CROSS_COMPILE="${CROSS_COMPILE}" modules_prepare
fi
drtyhlpr
Updated: Moved fstab stuff to new file 14-fstab.sh
r141
drtyhlpr
fix: kernel compilation, add ccache support
r248 # Create symlinks for kernel modules
chroot_exec ln -sf /usr/src/linux "/lib/modules/${KERNEL_VERSION}/build"
chroot_exec ln -sf /usr/src/linux "/lib/modules/${KERNEL_VERSION}/source"
fi
Stephen A. Brandli
Added FIRMWAREDIR option to use local copy of firmware.
r83 fi
Jan Wagner
Added: ENABLE_CRYPTFS - encrypted rootfs, use-latest-bootloader, cp-cleanup
r77
Jan Wagner
code cleanup and even more spliting
r70 else # BUILD_KERNEL=false
Unknown
kernel features + nexmon monitor mode wlan patch(kali-kernel) with RPI3,RPI3B+ firmware patch...
r502 if [ "$SET_ARCH" = 64 ] && { [ "$RPI_MODEL" = 3 ] || [ "$RPI_MODEL" = 3P ] ; } ; then
Unknown
- added new kernel features asked in interactive setup while compiling...
r522
Unknown
kernel features + nexmon monitor mode wlan patch(kali-kernel) with RPI3,RPI3B+ firmware patch...
r502 # Use Sakakis modified kernel if ZSWAP is active
if [ "$KERNEL_ZSWAP" = true ] || [ "$KERNEL_VIRT" = true ] || [ "$KERNEL_NF" = true ] || [ "$KERNEL_BPF" = true ] ; then
RPI3_64_KERNEL_URL="${RPI3_64_BIS_KERNEL_URL}"
fi
Unknown
- added new kernel features asked in interactive setup while compiling...
r522
Unknown
kernel features + nexmon monitor mode wlan patch(kali-kernel) with RPI3,RPI3B+ firmware patch...
r502 # Create temporary directory for dl
temp_dir=$(as_nobody mktemp -d)
# Fetch kernel dl
as_nobody wget -O "${temp_dir}"/kernel.tar.xz -c "$RPI3_64_KERNEL_URL"
Unknown
- added new kernel features asked in interactive setup while compiling...
r522
Unknown
kernel features + nexmon monitor mode wlan patch(kali-kernel) with RPI3,RPI3B+ firmware patch...
r502 #extract download
tar -xJf "${temp_dir}"/kernel.tar.xz -C "${temp_dir}"
Filip Pytloun
Refactor: split bootstrap actions and allow custom
r56
Unknown
kernel features + nexmon monitor mode wlan patch(kali-kernel) with RPI3,RPI3B+ firmware patch...
r502 #move extracted kernel to /boot/firmware
mkdir "${R}/boot/firmware"
cp "${temp_dir}"/boot/* "${R}"/boot/firmware/
cp -r "${temp_dir}"/lib/* "${R}"/lib/
# Remove temporary directory for kernel sources
rm -fr "${temp_dir}"
Unknown
- added new kernel features asked in interactive setup while compiling...
r522
Unknown
kernel features + nexmon monitor mode wlan patch(kali-kernel) with RPI3,RPI3B+ firmware patch...
r502 # Set permissions of the kernel sources
chown -R root:root "${R}/boot/firmware"
chown -R root:root "${R}/lib/modules"
fi
Unknown
- added new kernel features asked in interactive setup while compiling...
r522
Unknown
kernel features + nexmon monitor mode wlan patch(kali-kernel) with RPI3,RPI3B+ firmware patch...
r502 # Install Kernel from hypriot comptabile with all Raspberry PI
if [ "$SET_ARCH" = 32 ] ; then
# Create temporary directory for dl
temp_dir=$(as_nobody mktemp -d)
# Fetch kernel
as_nobody wget -O "${temp_dir}"/kernel.deb -c "$RPI_32_KERNEL_URL"
# Copy downloaded U-Boot sources
mv "${temp_dir}"/kernel.deb "${R}"/tmp/kernel.deb
# Set permissions
chown -R root:root "${R}"/tmp/kernel.deb
Unknown
- added new kernel features asked in interactive setup while compiling...
r522
Unknown
kernel features + nexmon monitor mode wlan patch(kali-kernel) with RPI3,RPI3B+ firmware patch...
r502 # Install kernel
chroot_exec dpkg -i /tmp/kernel.deb
# move /boot to /boot/firmware to fit script env.
#mkdir "${BOOT_DIR}"
mkdir "${temp_dir}"/firmware
mv "${R}"/boot/* "${temp_dir}"/firmware/
mv "${temp_dir}"/firmware "${R}"/boot/
Unknown
- added new kernel features asked in interactive setup while compiling...
r522
Unknown
kernel features + nexmon monitor mode wlan patch(kali-kernel) with RPI3,RPI3B+ firmware patch...
r502 #same for kernel headers
if [ "$KERNEL_HEADERS" = true ] ; then
# Fetch kernel header
as_nobody wget -O "${temp_dir}"/kernel-header.deb -c "$RPI_32_KERNELHEADER_URL"
mv "${temp_dir}"/kernel-header.deb "${R}"/tmp/kernel-header.deb
chown -R root:root "${R}"/tmp/kernel-header.deb
# Install kernel header
chroot_exec dpkg -i /tmp/kernel-header.deb
rm -f "${R}"/tmp/kernel-header.deb
fi
Unknown
- added new kernel features asked in interactive setup while compiling...
r522
Unknown
kernel features + nexmon monitor mode wlan patch(kali-kernel) with RPI3,RPI3B+ firmware patch...
r502 # Remove temporary directory and files
rm -fr "${temp_dir}"
rm -f "${R}"/tmp/kernel.deb
fi
Filip Pytloun
Refactor: split bootstrap actions and allow custom
r56
Jan Wagner
Added: ENABLE_CRYPTFS - encrypted rootfs, use-latest-bootloader, cp-cleanup
r77 # Check if kernel installation was successful
Unknown
kernel features + nexmon monitor mode wlan patch(kali-kernel) with RPI3,RPI3B+ firmware patch...
r502 KERNEL="$(ls -1 "${R}"/boot/firmware/kernel* | sort | tail -n 1)"
if [ -z "$KERNEL" ] ; then
echo "error: kernel installation failed! (/boot/kernel* not found)"
Jan Wagner
Added: ENABLE_CRYPTFS - encrypted rootfs, use-latest-bootloader, cp-cleanup
r77 cleanup
exit 1
fi
Filip Pytloun
Refactor: split bootstrap actions and allow custom
r56 fi